Welcome to FindBiometrics’ digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Behavioral Biometrics Specialist Wins Canadian Government Contract
Zighra has won a contract with Shared Services Canada (SSC) to test its identity threat defense system, DeepSense, under the Innovative Solutions Canada (ISC) program. The initiative aims to bolster cybersecurity across Canadian government departments using Zighra’s AI technology, which provides continuous identity validation and threat detection. DeepSense aligns with the Zero Trust security model, automating threat detection and reducing the workload for analysts. Zighra’s solutions are also built on the Zero Trust Maturity Model, facilitating continuous identity validation and real-time risk analysis to safeguard digital infrastructures.
Klick Labs AI Looks for Breaths, Micropauses in Deepfake Audio Assessments
Klick Labs scientists have developed an AI-based method to detect audio deepfakes by analyzing vocal biomarkers, such as breathing patterns and micropauses in speech, typically absent in deepfake audio. The method, inspired by clinical studies and sci-fi films, uses machine learning to enhance deepfake detection accuracy. Published in JMIR Biomedical Engineering, the study trained models on voice samples from 49 participants and achieved about 80 percent accuracy in distinguishing real from fake audio. The development follows high-profile voice cloning controversies and regulatory moves, like the FCC’s ban on deepfake voices in robocalls, emphasizing the need for ongoing improvement in detection technologies.
Apple Plans First Overseas Launch of iPhone Digital ID
Japan will be the first country outside the US to support an official government-issued digital ID in the iPhone’s Apple Wallet. Starting in late spring 2025, Japanese citizens will be able to load a virtual version of their “My Number” card onto their iOS devices. Introduced in 2016, My Number is a national identification system used for social security, taxation, and other administrative functions. Over 100 million citizens have applied for the card, which consolidates various personal identification forms into a single system. The Japan Digital Agency is collaborating with Apple to enable residents to present their official ID on their iPhone and access government services through an iOS app, using biometric authentication for secure transactions.
NIST Struggles with Massive Backlog of Security Vulnerability Assessments
The National Institute of Standards and Technology (NIST) is experiencing a significant backlog in its National Vulnerabilities Database (NVD) due to recent budget cuts, with over 93 percent of newly added flaws remaining unanalyzed. This poses a substantial security risk as threat actors continue to exploit these vulnerabilities. NIST’s budget was reduced by nearly 12 percent, leading to delays in vulnerability assessments and prompting the agency to prioritize significant vulnerabilities and seek private sector collaboration. VulnCheck’s analysis revealed that the backlog includes a high percentage of weaponized vulnerabilities and proof-of-concept exploits. To address this, a community response is urged, including better data provision by CNAs, automated CVE enrichment, and potential integration of initiatives like CISA’s Vulnrichment project.
Canadian Police Service Reports Positive Results from Biometric Prisoner Monitoring
The Regina Police Service (RPS) continues to test its new biometric monitoring system for detainees, following its implementation in March, with promising early results. The system, installed in 10 jail cells, monitors vital signs like heart rate, respiratory rate, and movement, alerting staff to potential medical distress and increasing the detection of concealed narcotics and contraband. The initiative aims to enhance detainee safety and reduce fatalities, inspired by a detainee’s death in August 2023. RPS Chief Farooq Sheikh is optimistic about expanding the technology to all cells, citing its role in improving detainee health and security.
FIDO Offers Guidelines to Improve Passkey UX
The FIDO Alliance has unveiled updated design guidelines to enhance the user experience (UX) for passkey sign-ins. The guidelines are designed to aid designers, engineers, product managers, content strategists, and UX researchers in implementing and expanding passkey usage, promoting a consistent and user-friendly experience to boost adoption of passwordless authentication. The guidelines were developed by the FIDO UX Working Group, which includes 131 professionals from 31 global brands and support from industry partners like 1Password, Google, and Yubico. They cover UX research, design principles, and resources for community engagement. The initiative builds on FIDO’s efforts to replace traditional passwords with more secure, phishing-resistant passkeys, a concept developed in collaboration with Apple, Google, and Microsoft, and grounded in FIDO’s standards established since 2014.
ARPA Network Raises $6M to Enhance On-Chain Gaming and AI Tech
ARPA Network, a specialist in decentralized secure computation, has raised $6 million from investors including Nomura’s Laser Digital and DeFiance Capital, to expand its ventures in on-chain gaming, Autonomous Worlds (AW), and cryptographic AI. The funding will support the development and launch of products such as DEAR, a fully on-chain game, and the integration of ARPA’s verifiable Random Number Generator (ARPA Randcast) with Eigenlayer AVS. This integration aims to provide a secure infrastructure for decentralized applications. ARPA is also exploring cryptographic AI to enhance blockchain capabilities, including privacy-preserving biometric technologies for secure blockchain access.
DC4EU Prepares Digital ID Interoperability Lab
The Digital Credentials for Europe (DC4EU) project is establishing an interoperability lab to support the pan-European digital identity framework, focusing initially on social security. The lab aims to ensure secure issuance and management of digital credentials, with the first pilot use cases in social security and education set to begin soon. Alongside the technical setup, the project team is refining the ecosystem governance framework, reviewing the Architecture Reference Framework (ARF), and ensuring compliance with emerging regulations. Significant progress has been made in mapping educational governance structures and defining roles for credential issuance and verification. The DC4EU project, launched in April 2023 and funded by the European Commission, involves 99 institutions from 25 countries.
—
June 3, 2024 — by Tony Bitzionis and Alex Perala
Follow Us